Overview

overview

7

Static

static

3

d613e13f67...cs.exe

windows7-x64

7

d613e13f67...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d613e13f67bf4054e8aa6dd5e287dfd0_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240520-jml92sba3x

  • MD5

    d613e13f67bf4054e8aa6dd5e287dfd0

  • SHA1

    1c8c594abeb47bad3382d74d8faf7ba7691008b6

  • SHA256

    8bc25b017a2361b8c9c17c8cf98928be7ad5cdea9dc47f294370d1f78b087e1b

  • SHA512

    8784ed84e4a1e8c78731fe9e854ff0c42135edf3b4f59cf6289431dec817cb0b772b80a83d0f950bf5272b5f9131aded392201f80863bda3253317eb47a1b277

  • SSDEEP

    49152:5DmZio+wLYxJYIJTcIU3fWbwkQ/qoLEw:5DmZuwLYxeJqo4w

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      d613e13f67bf4054e8aa6dd5e287dfd0_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      d613e13f67bf4054e8aa6dd5e287dfd0

    • SHA1

      1c8c594abeb47bad3382d74d8faf7ba7691008b6

    • SHA256

      8bc25b017a2361b8c9c17c8cf98928be7ad5cdea9dc47f294370d1f78b087e1b

    • SHA512

      8784ed84e4a1e8c78731fe9e854ff0c42135edf3b4f59cf6289431dec817cb0b772b80a83d0f950bf5272b5f9131aded392201f80863bda3253317eb47a1b277

    • SSDEEP

      49152:5DmZio+wLYxJYIJTcIU3fWbwkQ/qoLEw:5DmZuwLYxeJqo4w

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks